"Bump In The Wire" Chip Adds Security Without A Redesign

Feb 10, 2009 10:19 AM, By Louis E. Frenzel, Editor in Chief

The SentryFlow 9150 ASP from Hifn is a single-chip solution for adding full security to any communications or networking application, such as wireless backhaul aggregation. Its flow-through architecture completely offloads the host processor, so the device has zero system design impact when adding cryptography.

Article Tools

The 9150 offers interoperable security with support for multi-protocols, Suite B (crypto algorithms approved by the National Security Agency for data classified Secret or below), AES, and ECC. The chip implements Layer 2 encryption and provides an easy way to add IPSec, IPcomp (compressed), SRTP (for VoIP and video), and MACSec.

Also, the chip can handle just about all the standard and widely used encryption, authentication, and public key standards. Encryption includes AES versions GCM, CBC, CTR, CCM, and ECB as well as DES and 3DES. Its provided authentication methods are all versions of SHA, HMSC-SHA, AES-GMAC, and HMSC-MD5, plus several others. Its provided public key exchange methods are versions of ECDH and ECDSA, plus RSA and DH.

Overall performance is 2-Gbit/s throughput full duplex, 4-µs latency, and up to 1.2 million packets per second. It typically consumes 3 W, which is low for this level of security. The Package is 23 by 23 mm with a 404-pin TE-PBGA. Samples will be available in the first quarter with full production expected in the third quarter. Price is $210 in OEM volume.

Hifn offers other chips for wireless applications. Designed for picocells and femtocells, the SentryXL chips offload the host CPU, greatly improving performance. Also, the Express DS4100 advanced PCI Network Interface Card provides self-contained link security for data across Ethernet networks. It works well in IP SANs and systems with copper or fiber NAS connections.